I noticed that a check on a good password takes ~.5 seconds. However, if you give a password that is incorrect, it takes ~3 seconds to inform the user as such. Why is this?
-
1This is probably a safeguard to limit the rate at which passwords can be guessed. Hopefully an answer can be posted confirming (or debunking) this. (Then this comment can be removed as obsolete.)– Eliah KaganJul 13, 2012 at 19:30
-
This is indeed for security. @EliahKagan ,Your comment is good enough as an answer for this question. :)– drake01Jul 13, 2012 at 19:38
-
2Does this answer your question? Why is there a delay when entering a wrong password?– muruAug 8, 2023 at 9:46
Add a comment
|
1 Answer
Its for the security of the operating system. The arbitrary wait is to check brute-force attacks.
Duplicate Question: https://serverfault.com/questions/16232/ubuntu-linux-takes-longer-time-for-incorrect-passwords